Senior Security Engineer

Overnox; United States; Remote; USD 120,000 - 190,000; Full time

Job summary

Overnox is seeking a hands-on security engineer to harden real‑world cloud and Kubernetes environments. You will own vulnerability management, build detection content, and secure CI/CD pipelines, with a focus on practical defense across cloud workloads and AI‑adjacent systems.

You will work across incident support, configuration reviews, and automation of security workflows, leveraging scripting skills to accelerate remediation and reduce risk.

Qualifications

• Hands-on security engineering experience in cloud-native environments.
• Working knowledge of Kubernetes, container security, and at least one major cloud platform.
• Practical experience with vulnerability management and detection engineering tooling.
• Familiarity with CI/CD systems and how to secure them.
• Solid scripting or programming skills to build and automate security workflows.

Responsibilities

• Operate vulnerability management across cloud and Kubernetes estates: prioritize findings, drive remediation, and verify fixes.
• Build and tune detection content for threats targeting cloud, identity, and containerized workloads.
• Secure build and deployment pipelines against tampering, secret exposure, and dependency compromise.
• Apply security controls to AI-adjacent systems such as data pipelines, inference endpoints, and integrated LLM features.
• Conduct hands-on hardening, configuration reviews, and incident support as needed.

Skills

Cloud security

Kubernetes

Container security

Vulnerability management

Detection engineering

CI/CD security

Scripting/automation

AI/LLM security awareness

Tools

CI/CD tooling

Threat detection tooling

Job description

Role overview

Harden real‑world cloud and Kubernetes environments through hands‑on security engineering work. The role spans vulnerability management, detection engineering, pipeline security, and the emerging discipline of AI security, with a strong practitioner focus rather than purely advisory scope.

Responsibilities

• Operate vulnerability management across cloud and Kubernetes estates: prioritize findings, drive remediation, and verify fixes.
• Build and tune detection content for threats targeting cloud, identity, and containerized workloads.
• Secure build and deployment pipelines against tampering, secret exposure, and dependency compromise.
• Apply security controls to AI‑adjacent systems such as data pipelines, inference endpoints, and integrated LLM features.
• Conduct hands‑on hardening, configuration reviews, and incident support as needed.

Requirements

• Several years of hands‑on security engineering experience in cloud‑native environments.
• Working knowledge of Kubernetes, container security, and at least one major cloud platform.
• Practical experience with vulnerability management and detection engineering tooling.
• Familiarity with CI/CD systems and how to secure them.
• Solid scripting or programming skills to build and automate security workflows.

Nice to have

• Experience with AI/LLM security, prompt‑injection mitigation, or model supply‑chain risks.
• Exposure to compliance frameworks relevant to cloud workloads.